Lucene search
+L

281 matches found

Prion
Prion
added 2022/04/15 4:15 p.m.22 views

Denial of service

A denial of service vulnerability exists in the parseNormalModeParameters functionality of MZ Automation GmbH libiec61850 1.5.0. A specially-crafted series of network requests can lead to denial of service. An attacker can send a sequence of malformed iec61850 messages to trigger this vulnerabili...

5CVSS7.3AI score0.01825EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2022/04/15 4:00 p.m.7 views

CVE-2022-21159

A denial of service vulnerability exists in the parseNormalModeParameters functionality of MZ Automation GmbH libiec61850 1.5.0. A specially-crafted series of network requests can lead to denial of service. An attacker can send a sequence of malformed iec61850 messages to trigger this vulnerabili...

7.5CVSS7.5AI score0.01825EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2022/04/15 4:00 p.m.48 views

CVE-2022-21159

A denial of service vulnerability exists in the parseNormalModeParameters functionality of MZ Automation GmbH libiec61850 1.5.0. A specially-crafted series of network requests can lead to denial of service. An attacker can send a sequence of malformed iec61850 messages to trigger this vulnerabili...

7.5CVSS7.5AI score0.01825EPSS
SaveExploits1References3
CVE
CVE
added 2022/04/15 4:00 p.m.94 views

CVE-2022-21159

CVE-2022-21159 affects MZ Automation libiec61850 1.5.0, where the parseNormalModeParameters function can be abused by malformed IEC61850 messages to trigger a denial of service. The connected sources (NVD, OSV, Veracode, PT-Security) corroborate a DoS impact via parsing/validation issues in libIE...

7.5CVSS7.3AI score0.01825EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2022/04/15 4:00 p.m.19 views

CVE-2022-21159

A denial of service vulnerability exists in the parseNormalModeParameters functionality of MZ Automation GmbH libiec61850 1.5.0. A specially-crafted series of network requests can lead to denial of service. An attacker can send a sequence of malformed iec61850 messages to trigger this vulnerabili...

7.5CVSS6.6AI score
SaveExploits0References5
CNNVD
CNNVD
added 2022/04/15 12:00 a.m.11 views

Mz Automation Libiec61850 安全漏洞

Mz Automation Libiec61850 is an open source library for the IEC 61850 protocol from Mz Automation. A security vulnerability exists in Mz Automation GmbH libiec61850 1.5.0 that originates from a specially crafted series of network requests that could result in a denial of service. An attacker can...

7.5CVSS7.3AI score0.01825EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/04/15 12:00 a.m.7 views

PT-2022-14891 · Unknown +1 · Libiec61850 +1

Name of the Vulnerable Software and Affected Versions: libiec61850 version 1.5.0 Description: A denial of service issue exists in the parseNormalModeParameters functionality. It can be triggered by a specially-crafted series of network requests, allowing an attacker to send a sequence of malforme...

10CVSS7.6AI score0.02036EPSS
SaveExploits9References36
NVD
NVD
added 2022/04/12 8:15 a.m.22 views

CVE-2022-1302

In the MZ Automation LibIEC61850 in versions prior to 1.5.1 an unauthenticated attacker can craft a goose message, which may result in a denial of service...

7.5CVSS0.01097EPSS
SaveExploits0References1
OSV
OSV
added 2022/04/12 8:15 a.m.16 views

CVE-2022-1302

In the MZ Automation LibIEC61850 in versions prior to 1.5.1 an unauthenticated attacker can craft a goose message, which may result in a denial of service...

7.5CVSS6.8AI score
SaveExploits0References1
Prion
Prion
added 2022/04/12 8:15 a.m.26 views

Denial of service

In the MZ Automation LibIEC61850 in versions prior to 1.5.1 an unauthenticated attacker can craft a goose message, which may result in a denial of service...

5CVSS7.4AI score0.01097EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/04/12 7:30 a.m.95 views

CVE-2022-1302

CVE-2022-1302 affects MZ Automation LibIEC61850 versions prior to 1.5.1. An unauthenticated attacker can craft a GOOSE message to cause a denial of service. Remediation: upgrade to LibIEC61850 1.5.1 or newer; as a temporary measure, restrict access to the affected service.

7.5CVSS7.4AI score0.01097EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/04/12 7:30 a.m.36 views

CVE-2022-1302 Malformed Goose Message in LibIEC61850 may result in a denial of service

In the MZ Automation LibIEC61850 in versions prior to 1.5.1 an unauthenticated attacker can craft a goose message, which may result in a denial of service...

7.5CVSS7.6AI score0.01097EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/04/12 12:00 a.m.21 views

Mz Automation Libiec61850 输入验证错误漏洞

Mz Automation Libiec61850 is an open source library for the IEC 61850 protocol from Mz Automation. An input validation error vulnerability exists in Mz Automation Libiec61850 prior to 1.5.1, where an unauthenticated attacker could craft a goose message to cause a denial of service...

7.5CVSS7.2AI score0.01097EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/04/12 12:00 a.m.9 views

PT-2022-13789 · Mz Automation +1 · Libiec61850 +1

Name of the Vulnerable Software and Affected Versions: MZ Automation LibIEC61850 versions prior to 1.5.1 Description: The issue allows an unauthenticated attacker to craft a goose message, potentially resulting in a denial of service. Recommendations: For versions prior to 1.5.1, update to versio...

10CVSS7.8AI score0.02036EPSS
SaveExploits9References35
Talos
Talos
added 2022/02/28 12:00 a.m.92 views

MZ Automation GmbH libiec61850 parseNormalModeParameters denial of service vulnerability

Summary A denial of service vulnerability exists in the parseNormalModeParameters functionality of MZ Automation GmbH libiec61850 1.5.0. A specially-crafted series of network requests can lead to denial of service. An attacker can send a sequence of malformed iec61850 messages to trigger this...

7.5CVSS7.5AI score0.01825EPSS
SaveExploits1
ATTACKERKB
ATTACKERKB
added 2022/01/14 8:15 p.m.5 views

CVE-2021-45769

A NULL pointer dereference in AcseConnectionparseMessage at src/mms/isoacse/acse.c of libiec61850 v1.5.0 can lead to a segmentation fault or application crash...

7.5CVSS5.8AI score0.01062EPSS
SaveExploits1References2
NVD
NVD
added 2022/01/14 8:15 p.m.24 views

CVE-2021-45769

A NULL pointer dereference in AcseConnectionparseMessage at src/mms/isoacse/acse.c of libiec61850 v1.5.0 can lead to a segmentation fault or application crash...

7.5CVSS0.01062EPSS
SaveExploits1References1
CVE
CVE
added 2022/01/14 7:10 p.m.67 views

CVE-2021-45769

CVE-2021-45769 involves a NULL pointer dereference in libIEC61850 v1.5.0 (AcseConnection_parseMessage in src/mms/iso_acse/acse.c) that can cause a segmentation fault or application crash. Several third-party advisories (PT Security) confirm the issue and provide concrete remediations: upgrade lib...

7.5CVSS7.4AI score0.01062EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/01/14 7:10 p.m.32 views

CVE-2021-45769

A NULL pointer dereference in AcseConnectionparseMessage at src/mms/isoacse/acse.c of libiec61850 v1.5.0 can lead to a segmentation fault or application crash...

7.7AI score0.01062EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2022/01/14 12:00 a.m.7 views

PT-2022-12396 · Unknown +1 · Libiec61850 +1

Name of the Vulnerable Software and Affected Versions: libiec61850 version 1.5.0 Description: A NULL pointer dereference in AcseConnection parseMessage at src/mms/iso acse/acse.c can lead to a segmentation fault or application crash. Recommendations: For libiec61850 version 1.5.0, consider applyi...

10CVSS7.7AI score0.02036EPSS
SaveExploits9References34
Rows per page
Query Builder